70k credentials leaked in Fortinet attacks; researcher says an LLM code review would cost less than one appliance
cyb3rops · x · 2026-10-24
Group-IB reports a k0t-linked campaign targeting internet-facing FortiGate, FortiWeb, and Palo Alto GlobalProtect systems, with 70,000+ exposed credentials found. Attackers chained vuln exploitation and brute force, moved laterally with NetExec/Mimikatz/Impacket, persisted via MeshCentral and AdaptixC2, and exfiltrated data with Rclone to Wasabi S3 and MEGA.
cyb3rops quips that Fortinet should have a frontier LLM review and fix its shipped source code — the tokens would cost less than one appliance, and every customer would benefit.
More from AGI Musings
- Ramp data: top 1% of AI spenders account for 80% of spend, mostly VC-backed — SumitGup · 2026-10-24
- Preprint archives and journals lack cybersecurity budgets and may not survive what's coming — birchlse · 2026-10-24
- Gary Marcus Calls to Pull AI Security Products Off the Market — GaryMarcus · 2026-10-24
- Epoch AI researcher joins METR to measure how fast AI is accelerating AI R&D from inside labs — Jsevillamol · 2026-10-24
- No sign you can remove mathematicians from the loop yet, researcher says of AI proof hype — gerardsans · 2026-10-24
- Industrial AI startup raises $130M Series D at $1.4B valuation led by Sapphire Ventures — ycombinator · 2026-10-24